This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: 8Rq4aJaZ+2hOnIjLyhLzBqW+oMtJFdS+Z5gTbzMreLA= Subject key identifier: C0:D9:27:6B:03:FE:61:48:42:E8:06:CE:FF:0D:15:52:5C:FC:52:71 Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2564 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2564 Signing time: Tue 02 Dec 2025 14:43:07 +0000 Manifest this update: Tue 02 Dec 2025 14:43:06 +0000 Manifest next update: Tue 09 Dec 2025 14:43:06 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: KIM0a9MJ65uvVSgbe3VSNVvRkJs1DdSHtulJABUtqL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9572 (0x2564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Dec 2 14:43:06 2025 GMT Not After : Dec 9 14:43:06 2025 GMT Subject: CN=692efafb-f12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:79:98:ca:db:33:9f:69:03:f5:de:c1:6e: 53:f1:4e:73:ec:83:b8:dd:04:c1:e1:05:1e:c9:5c: 31:2b:2f:ec:cf:e2:dc:c4:e2:9f:9d:65:d7:3e:4f: a5:93:05:a1:9b:d4:91:44:73:6c:03:70:f3:51:e7: 81:45:9d:41:21:bc:2e:34:bd:67:91:9e:c4:33:c2: 35:23:94:3f:91:be:c7:da:f4:e6:83:ea:9b:ef:b4: a6:60:46:6b:fe:6a:97:1a:76:4f:6e:86:b1:a9:fa: 4a:ad:1b:74:9b:dd:e8:9e:dc:a4:09:b6:00:bc:0c: 61:01:f6:3e:7e:ab:f0:d3:e9:7a:c3:66:74:c6:38: 8d:13:ae:9a:16:23:03:24:8f:5d:24:b2:04:9e:96: ad:a5:3a:69:4e:12:44:78:b4:d4:10:23:61:e3:af: 4d:8f:3f:f3:4d:ef:5d:cf:f3:be:67:08:60:30:a4: 78:23:52:33:de:80:62:db:6e:1f:71:89:4a:3b:84: de:68:66:eb:34:dc:07:b3:92:fa:43:7b:93:94:8f: 36:ce:dc:2e:f6:21:83:e2:49:5f:91:0e:70:08:e0: e7:b9:29:b8:69:f4:ae:94:3a:88:85:52:c9:1e:03: 1d:dc:80:1a:b8:10:3c:51:01:4c:c9:4a:91:30:0e: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D9:27:6B:03:FE:61:48:42:E8:06:CE:FF:0D:15:52:5C:FC:52:71 X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:99:46:b7:f7:d9:7f:ac:65:d2:fc:f5:3d:61:28:43:a4: bf:2f:ff:05:be:f6:25:f3:19:e3:42:3a:77:ed:a0:69:ab:1f: 0c:dc:e6:94:fa:32:2a:19:be:c7:33:d7:12:cb:16:68:18:e1: e9:fa:6a:44:8b:2a:66:74:9e:88:bb:be:f3:0f:19:14:dd:b0: 51:5f:b0:11:98:d9:51:fa:69:62:f6:3a:da:89:0d:cd:e3:b3: 7e:5b:08:39:f6:a9:d9:f3:19:8f:20:24:c1:51:3e:80:14:d8: aa:ad:a4:38:ca:08:e8:29:ab:5c:ca:d8:70:bc:a9:d7:3d:f7: c0:81:b3:21:84:82:80:a7:e2:15:e7:e8:3e:84:11:f6:11:ff: 46:00:96:11:e8:41:58:aa:f8:67:57:bf:e6:56:44:03:14:f0: d2:1c:a0:a8:9e:f1:69:fa:eb:aa:70:f2:d0:11:7b:99:0a:37: d4:a7:a1:35:de:15:dd:09:b1:e8:bb:cf:de:73:4b:b8:94:fb: ce:06:cc:83:21:a5:8b:9b:4a:9f:f4:06:dc:01:3c:ec:73:46: 71:94:6d:f1:94:fa:c2:6e:8d:b7:da:64:06:36:f9:56:fe:a3: a8:63:a0:51:ef:41:11:dd:bc:cc:30:e9:0c:fa:95:05:60:7c: dd:2b:ca:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUxMjAyMTQ0MzA2WhcNMjUxMjA5MTQ0MzA2WjAYMRYwFAYD VQQDEw02OTJlZmFmYi1mMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnp5mMrbM59pA/XewW5T8U5z7IO43QTB4QUeyVwxKy/sz+LcxOKfnWXXPk+l kwWhm9SRRHNsA3DzUeeBRZ1BIbwuNL1nkZ7EM8I1I5Q/kb7H2vTmg+qb77SmYEZr /mqXGnZPboaxqfpKrRt0m93ontykCbYAvAxhAfY+fqvw0+l6w2Z0xjiNE66aFiMD JI9dJLIEnpatpTppThJEeLTUECNh469Njz/zTe9dz/O+ZwhgMKR4I1Iz3oBi224f cYlKO4TeaGbrNNwHs5L6Q3uTlI82ztwu9iGD4klfkQ5wCODnuSm4afSulDqIhVLJ HgMd3IAauBA8UQFMyUqRMA40BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDZJ2sD /mFIQugGzv8NFVJc/FJxMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkhZlGt/fZf6xl0vz1PWEoQ6S/L/8FvvYl8xnjQjp37aBpqx8M3OaU +jIqGb7HM9cSyxZoGOHp+mpEiypmdJ6Iu77zDxkU3bBRX7ARmNlR+mli9jraiQ3N 47N+Wwg59qnZ8xmPICTBUT6AFNiqraQ4ygjoKatcythwvKnXPffAgbMhhIKAp+IV 5+g+hBH2Ef9GAJYR6EFYqvhnV7/mVkQDFPDSHKConvFp+uuqcPLQEXuZCjfUp6E1 3hXdCbHou8/ec0u4lPvOBsyDIaWLm0qf9AbcATzsc0ZxlG3xlPrCbo232mQGNvlW /qOoY6BR70ER3bzMMOkM+pUFYHzdK8rR -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:51 2025 by rpki-client